Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/10/2026, 07:07
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-30_bbcb671824d3ef13681e59d267f27808_elex_mespinoza.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_bbcb671824d3ef13681e59d267f27808_elex_mespinoza.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-30_bbcb671824d3ef13681e59d267f27808_elex_mespinoza.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-30_bbcb671824d3ef13681e59d267f27808_elex_mespinoza.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-09-30_bbcb671824d3ef13681e59d267f27808_elex_mespinoza.exe
- Size 1001KB
- Sample261001-hx2xtavzhy
- SHA256 a14393b6c5888de398a6f05bab6544c14eeefb88f217eeb143ea11c34b83d225
- MD5 bbcb671824d3ef13681e59d267f27808
- SHA1 ebcee7faf7caef9d667a11351b7d618d13ee5206
- SHA512 ccac82d8a66fd7aefd38553dbbca7f0c1d95231b29fc6f3ffa0afe4b915b8af2f2d094f9cf6ba433959107c018752b1915bef6c55f269f37ac80f4af1a63a24d
- SSDEEP 24576:VlM0neCBd4q6zq2/SmEhBwpemIwpefBxKDYEZkiedT32p:Bf6zqXmnpeapefLeXp
- TLSH T1B925BF81222DBB3DCCD310B03ADD763BA27A1D492B2445DF17E1AEF99D122C216BD91D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with VMProtect. 1 IoCs
resource yara_rule behavioral1/memory/1764-0-0x0000000000400000-0x000000000061B000-memory.dmp INDICATOR_EXE_Packed_VMProtect